On 11/18/2012 05:30 PM, Maxim Kammerer wrote: > Hi, > > What does the following remark mean: > > [21:45:45] <prometheanfire> confirmed that virt is fast now if using > nested pages and kernels greater then version hardened-3.5.4-r1 (r2 is > prefered) > > Thanks! >
Originally virtualization was slow on grsec/pax with either uderef or kernexec enabled. Pipacs overcame this limitation in 3.5.4-r1 and overcame a memory commit issue kvm was having in 3.5.4-r2. He overcame it using nested page tables on newer CPUs, which means older CPUs will likely still be slow. -- -- Matthew Thode (prometheanfire)
signature.asc
Description: OpenPGP digital signature
